Vulnerabilities exploitable today
369,271in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,695
New KEV · 24H0
Exploit Today ≥ 701,636
Distribution · last window
- Critical2,152
- High7,655
- Medium5,617
- Low537
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-4088—20.1%
——6——CVE-2013-6205—20.1%
——6——CVE-2024-53153—20.1%
——6——CVE-2017-13683—20.1%
——6——CVE-2026-78615—20.1%
——6A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL.9dCVE-2017-8189—20.1%
——6——CVE-2023-46046—20.1%
——6——CVE-2010-2023—20.1%
——6——CVE-2025-25078—20.1%
——6——CVE-2017-13682—20.1%
——6——CVE-1999-1424—20.1%
——6——CVE-2020-37211—20.1%
——6——CVE-2026-40872—20.1%
——6——CVE-2020-37212—20.1%
——6——CVE-2024-9391—20.1%
——6——CVE-2024-25392—20.1%
——6——CVE-2024-39869—20.1%
——6——CVE-2026-348366.5 MED20.1%
——6Combodo iTop is a web based IT service management tool. Prior to 3.2.3, improper access control in ajax.render.php and ajax.document.php allows for document access without checking on user permissions. This issue has been fixed in version 3.2.3.12dCVE-2010-2024—20.1%
——6——CVE-2026-440546.5 MED20.1%
——6Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism.45dCVE-2023-41077—20.1%
——6——CVE-2025-25098—20.1%
——6——CVE-2026-46558—20.1%
——6——CVE-2023-47671—20.1%
——6——CVE-2026-31205—20.1%
——6——CVE-2025-48092—20.1%
——6——CVE-2020-1976—20.1%
——6——CVE-2023-32010—20.1%
——6——CVE-2023-47644—20.1%
——6——CVE-2023-524947.8 HIG20.1%
——6In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Add alignment check for event ring read pointer
Though we do check the event ring read pointer by "is_valid_ring_ptr"
to make sure it is in the buffer range, but there is another risk the
pointer may be not aligned. Since we are expecting event ring elements
are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer
could lead to multiple issues like DoS or ring buffer memory corruption.
So add a alignment check for event ring read pointer.44dCVE-2024-13668—20.1%
——6——CVE-2022-50838—20.1%
——6——CVE-2025-62041—20.1%
——6——CVE-2018-16664—20.1%
——6——CVE-1999-1426—20.1%
——6——CVE-2026-33030—20.1%
——6——CVE-2024-22455—20.1%
——6——CVE-2022-44717—20.1%
——6——CVE-2025-63663—20.1%
——6——CVE-2026-20125—20.1%
——6——